CVE-2024-40764

Summary

Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause Denial of Service (DoS).

Affected Software

VendorProductVersion RangeStatus
SonicWallSonicOS6.5.4.4-44v-21-2395 and older versionsaffected
SonicWallSonicOS7.0.1-5151 and older versionsaffected
SonicWallSonicOS7.1.1-7051 and older versionsaffected

Weaknesses

  • CWE-122: CWE-122 Heap-based Buffer Overflow

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

CVE Program Container

Additional References

References